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Abstract 

Homogenous Boolean function is an essential part of any cryp- 
tographic system. The ability to construct an optimized reversible 
circuits for homogeneous Boolean functions might arise the possibility 
of building cryptographic system on novel computing paradigms such 
as quantum computers. This paper shows a factorization algorithm 
to synthesize such circuits. 



1 Introduction 

Reversible logic [H [11] is one of the hot areas of research. It has many 
applications in quantum computation [131 [23], low-power CMOS [8l[3l] and 
many more. Synthesis and optimization of reversible circuits cannot be done 
using conventional ways |29j . 

The design and analysis of Boolean based devices has many applications 
in engineering and science, e.g. cryptography. Massive computation power 
is required as the complexity and so the strength of encryption algorithms 
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increase. Secure encryption algorithms involves designing two elementary 
blocks: P-box and S-box [25]. The S-Box theory is the design and analy- 
sis of Boolean functions that have certain desirable cryptographic properties 
such as balance, symmetry and high nonlinearity [26]. Synthesis and opti- 
mization of Boolean systems on non-standard computers that promise to do 
computation more powerfully [2B] than classical computers, such as quantum 
computers, is an essential aim in the exploration of the benefits that may be 
gain from such systems. 

A lot of work has been done trying to find an efficient reversible circuit 
for an arbitrary reversible function. Reversible truth table can be seen as 
a permutation matrix of size 2" x 2". In one of the research directions, it 
was shown that the process of synthesizing linear reversible circuits can be re- 
duced to a row reduction problem of n x n non-singular matrix [2l] . Standard 
row reduction methods such as Gaussian elimination and LU-decomposition 
have been proposed [5]. In another research direction, search algorithms 
and template matching tools using reversible gates libraries have been used 
[Tin nn [TS| [201 EI]- These will work efficiently for small circuits. Benchmarks 
for reversible circuits have been established [Sl[T]. 

Implementing Boolean functions with n inputs and a single output as 
reversible circuits using some of the above methods is not possible for cer- 
tain classes of Boolean functions [2Z], where the inputs are required to stay 
unchanged as required by many quantum algorithms [121 E3], where further 
operations will be applied on the inputs based on the output of the Boolean 
function . For example, representing the truth table of a Boolean function as 
a non-singular nxn matrix may not be possible in some cases. Implementing 
Boolean function as a reversible function using search algorithms could be 
unnecessarily exhaustive, since we can immediately drop half the reversible 
truth table and keep track only for the changes to the single output, since no 
inputs will be changed. Recently, there have been few efforts to find methods 
to create efficient Boolean reversible circuits. A method was proposed where 
it used a ROM-based model such that the inputs might not be changed even 
during an intermediate stage [30] • Using this model will require an expo- 
nential number of ROM calls. In [32], it was shown that there is a direct 
correspondence between reversible Boolean operations and certain forms of 
classical logic known as Reed-Muller expansions. This arises the possibility 
of handling the problem of synthesis and optimization of reversible Boolean 
logic within the field of Reed-Muller logic. In another research direction [22] , 
it was suggested that fixed polarity Reed-Muller expansions (FPRM) [2] can 
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be used with binary decision diagrams (BDD) in an iterative algorithm to 
generate reversible circuits for simple incompletely specified Boolean func- 
tions with less than 10 variables. A method proposed in [16] used a modified 
version of Karnaugh maps and depends on a clever choice of certain minterms 
to be used in the minimization process. However, this algorithm may have 
poor scalability because of the usage of Karnaugh maps. Another method is 
given in [T3j, where a very useful set of transformations for Boolean quan- 
tum circuits was shown. In this method, extra auxiliary bits are used in the 
construction that will increase the hardware cost. 

In this paper, a simple algorithm for synthesis and optimization by fac- 
torization of homogeneous Boolean functions of n variables with degree < 3 
will be presented. The algorithm highly optimizes the quantum cost and the 
number of gates of the reversible circuit. The structure of the paper is as 
follows: Section [2] reviews the necessary background. Section [3] presents two 
methods for the reversible construction of homogeneous Boolean functions 
where the experimental results will be presented. The paper ends up with a 
conclusion in Section HI 

2 Background 

2.1 Reversible Boolean Function 

A Boolean function is a function that takes n Boolean inputs and generates 
a single Boolean output. 

Definition 2.1 (Boolean Function) 

Any Boolean function f with n variables f : {0, 1}" {0, 1} can be 
represented as a Positive Polarity Reed-Muller (PPRM) expansion as follows 

2"-l 

f{Xn-l:...,Xi,XQ) = ^hiifi, (1) 
i=0 

where, 

n-l 

^^ = \{ {^kT , (2) 
fc=0 
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where x^, hi G {0, 1} and i/^ represent the binary digits of i. (fi are known as 
product terms (minterms) and hi determine whether a minterm is present or 
not. ^ means that the arguments are subject to Boolean operation exclusive- 
OR (XOR) and multiplication is assumed to be the AND operation. 

For example, the set of all 3-inputs Boolean functions can be represented 

as: 

f{x2,Xi,Xo) = ho®biXo®b2Xi®b3XiXo®h4X2®h<iX2Xo®hQX2Xi®b7X2XiXo. (3) 

Setting 6j's to or 1 gives different 3-inputs Boolean functions. 
2.2 Reversible Boolean Circuits 

In building a reversible Boolean circuit for a given Boolean function with n 
variables, ann + lxn + l reversible circuit will be used, where the extra 
auxiliary bit will be initialize to zero, to hold the result of the Boolean func- 
tion at the end of the computation. CNOT gate is the main primitive gate 
that will be used in building the circuit. CNOT gate is defined as follows: 

Definition 2.2 (CNOT gate) 

CN0T{xn-i,Xn~2, ■ ■ ■ , Xq] f) is a reversible gate with n + 1 inputs Xn^i, 
Xn-2,- ■ ■ (known as control bits) and fin (known as target bit) and n + 1 
outputs Un-i, yn-2,- ■ ■ ,yo o-^d font- The Operation of the CNOT gate is 
defined as follows, 

yi = XiJorO<i<n-l, 

fout fin ffi • • • -^O; 

i.e. the target bit will be flipped if and only if all the control bits are set 
to 1. Some special cases of the general CNOT gate have their own names, 
CNOT gate with no control bits is called NOT gate (Figure [TJb), where the 
bit which will be flipped unconditionally. CNOT gate with one control bit 
is called Feynman gate (Figure [He). CNOT gate with two control bits is 
called Toffoli gate (Figure [Hd). 
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a.CNOT c.Feynman d.Toffoli 

Figure 1: CNOT gates. The back circle • indicates the control bits, and 
the symbol © indicates the target bit. {a)CNOT gate with n control bits, 
(b) CNOT gate with no control bits. {c)CNOT gate with one control bit. 
{d)CNOT gate with two control bits. 

2.3 Quantum Cost 

Quantum cost is a term appears in the literature to refer to the technological 
cost of building CNOT gates. The total quantum cost of a CA^OT-based 
reversible circuit is subject to optimization as well as the number of CNOT 
gates used in the circuit. Quantum cost based primarily on the number 
of control bits per CNOT gates. Quantum cost refers to the number of 
elementary operations required to build the CNOT gate [3], HHj. The cal- 
culation of quantum cost for the circuits in this paper will be based on the 
cost table available in [7]. The state-of-art shows that both CNOT{xi) and 
CNOT{xi] f) have quantum cost = 1, CNOT{xi, Xj] f) has a quantum cost 
= 5, and CNOT{xi,Xj,Xk; /) has a quantum cost = 13. Interaction of such 
gates in different ways may give a total quantum cost of the circuit less than 
the sum of the quantum cost of each CNOT gate in the circuit. 

2.4 Homogeneous Boolean Functions 

Homogeneity and nonlinearity are important properties of Boolean functions 
when used in cryptographic algorithms. Boolean functions with the highest 
possible nonlinearity are called homogeneous bent functions [251 [26] . 

Definition 2.3 (Homogeneous Boolean Function) 

A Boolean function / : {0, l}" —>■ {0,1} is homogeneous of degree k if it 
can be represented as follows flS^ . 

f{Xn—l) • • • i^l-i ^o) ~ bi^,,,i^Xi^ . . . Xi^ , (5) 

0<ii<...<ife<n— 1 
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where each term . . .Xik, bii...it ^■5 product of precisely k variables. 



For example, it was found that there are 20 distinct minterms of degree 
3 in a Boolean function of six variables and hence there are 2^*^ possible ho- 
mogeneous Boolean function of degree 3 on six variables. Within this space, 
there are 30 homogeneous bent functions with 16 minterms. For example, a 
representative of a homogeneous bent function of degree 3 on six variables is 
as follows [26l . 



3 Synthesis Algorithm 
3.1 Direct Synthesis 

In this section, the steps to implement any arbitrary Boolean function / using 
positive polarity RM expansions as reversible circuits will be presented. For 
example, consider the homogeneous function, 

/ {Xi, X3, X2, Xi,Xo) = X2X1X0 © X4X3X0 © X4XSX1 © X4X3X2 © X^XiXq. (7) 

To find the reversible circuit implementation for this function, we may follow 
the following procedure: 

1- For a Boolean function with n variables, prepare n bits and initialize 
an extra bit t to , which will hold the result of the Boolean function. 

2- Add a CNOT gate for each product term in this expansion taking the 
Boolean variables in this product term as control bits and the extra bit 
as the target bit. 

3- For the product term, which contains 1, add a CNOT{t), so the final 
circuit for / shown in Eqn. [7|will be as shown in Fig. [2l 




/ = X0X1X2 © X0X1X3 © X0X1X4 © X0X1X5 

®XoX2X3, © © XQX3X4 © X0X4X5 

(BX1X2X3 © © X1X3X5 © X1X4X5 

©X2X3X4 © X2X3Xrj © X2X4X5 © X3X4X5. 



(6) 
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Figure 2: Reversible circuit realization using the direct method of the homo- 
geneous Boolean function shown in EqnJTl 

3.2 Optimization by Factorization 

The main idea of factorization is to find the common terms in a Boolean 
function that have high quantum cost and implement them in a way to 
decrease multi-calculations of such terms and so decrease the total quantum 
cost and/or the total number of CNOT gates. The following observations 
are essential in understanding the final construction: 

Observation 3.1 For a homogeneous Boolean function of degree 3 of the 
form, 

it can be factorized to take the form, 

XiXj {Xk )• (9) 

Realization of that expression as a reversible circuit is as follows, 



CNOT{xk,;xk,)CNOT{xk 

CNOT{xux,,Xk„; f)CNOT{xk„_,;XkJ . . .CNOT{xk,;Xk,) (10) 
CN0T{xk^;Xk2)- 

Synthesis of that circuit will decrease the quantum cost from 13n is con- 
structed using the direct method to 13 + 2(r2 — 1) after factorization. If the 
reservation of the inputs is not important, then the quantum cost can be de- 
creased to 12 + n, where the last {n — 1) CNOT gates used to restore the 
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state of the inputs can be removed. For example, the following function with 
a circuit of quantum cost = 39, 

f = XqX^X/^® XiX2,Xi® X2XzX4^., (11) 

can he re-written as follows, 

f = xsXi (xo © xi © X2) , (12) 

such function has a circuit of quantum cost = 17 as shown in Figl^ Note 
that, the last two CNOT gates can he removed of the values of the inputs is 
not important. 
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Figure 3: Reversible circuit realization for the Boolean function shown in 
Eqn. [11] based on Observation 13.11 



Observation 3.2 // a homogeneous Boolean function can he represented in 
the form, 

XiiXj-^ {XkQ © ■ ■ ■ © Xk„) © Xi^Xj^ (xfeQ © ■ ■ ■ © Xk„ © 3^fc„+i) (13) 

© ... © Xi^Xj^ (xfe,j © ■ ■ ■ © Xk„ © ■ ■ ■ © a^fc„+m_i) ! 

then the upper hound of the quantum cost will he decreased from 13m (n + ^^^^ 
O (m^) using the direct method to 13m + 2(n + m— 1) = O (m) and the num- 
ber of CNOT gates will he m + 2{n -\- m — 1) instead of m{n + ^^^) ■ For 
example, the function, 

f = X2X3 {xo © xi) © X3X4 (xo © xi © X2) , (14) 
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has a circuit with quantum cost = 30 instead of 65 (m = 2,n = 1) if syn- 
thesized using the direct method as shown in Fig^ Note that, the last two 
CNOT gates can be removed if the values of the inputs is not important. 
Finding the maximum number of common factors m leads to a decrease in 
the number of CNOT gates as well as the total quantum cost of the reversible 
circuit. 
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Figure 4: Reversible circuit realization for the Boolean function shown in 
Eqn. [m based on Observation 13.21 



3.2.1 Factorization Algorithm 

From Observation 13.21 we can see that finding the maximum number of 
common factors in the expression will optimize the quantum cost and the 
number of CNOT gates of the reversible circuit. Similar observations can 
be constructed for homogeneous Boolean functions of degrees 2 by omitting 
one of the variables and using 5 instead of 13. In this section, an algorithm 
that helps in factorizing the expression to find the maximum number of 
common factros will be presented. Experimental results for that algorithm 
will be shown in the next section. To factorize an expression maximizing the 
number of factors, we follow the following algorithm: 

1- Group the Boolean expression to a collection of minterms of the same 
degree and apply the following steps separately on each collection. 

2- For a homogeneous Boolean function on n variables and m minterms, 
draw a table of n columns and m rows such that each column represents 
a variable and each row represents a minterm. 
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3- For each minterm in the expression (row), if Xi exists then place 1 in 
the corresponding celL 

4- Count the number of I's in each column and choose the variable with 
maximum occurrence as a common factor, if more than one variable 
have the same count, then choose the first one. We will call such 
variable as a factor variable and the terms in the corresponding bracket 
as a factor group. 

5- Repeat Step 3 recursively for the remaining rows of the table collecting 
a set of factor variables and the corresponding factor groups, where 
some minterms will be left over (remainder minterms). 

6- Find the common terms within all the factor groups and take them as 
a common factor generating groups of factor variables. This step arise 
the form shown in Observation 13. 1[ 

7- Group the common terms with the same group of factor variables and 
repeat Step 3 recursively within each group. 

8- Find the subset relationships between the groups of factor variables. 
This arises the form shown in Observation 13.21 

9- For each set of related groups, construct the reversible circuit as shown 
in Observation 13.21 Taking into account to reset the used variables 
before constructing the next related group. 

10- For the remainder minterms, construct the corresponding CNOT gates 
using the direct method. 

For example, consider the Boolean function shown in Eqn. [61 The fac- 
torization table from steps 1-3 on the expression is shown in Table{T] In this 
case, all the variables occurs 8 times in the expression, so we choose Xq as 
the first factor variable. Applying Step 4 recursively on the remaining rows, 
we can find that X2 and x^ are the remaining factor variables. Next thing to 
do is to find the common terms in the factor groups as follows, 

/ = Xq{xiX2 ® XiX^ © XiXj © XiX^ © X2X3 © © X3X4 © x^x^) 

®X2{xiX^ © X1X4 © X'jXj © Xs^s © 2:4X5) (15) 

©X5 (X1X3 © X1X4 © X3X4 ) . 
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Table 1: Factorization table representing a homogeneous Bent function of 
degree 3 on 6 variables. 



Then group all the factor terms together follows, 

/ = (Xi(x3 © X4) © XsX4,){xo ® X2® X5) 

®XiX5{xo®X2) /.^N 

©a;oX2(a;i © X3 © X5) 

Q)XoXiX5 © X2X3X5. 

It is clear from the last expression that [xqXiX^ © X2X3Xr,) are the re- 
mainder minterms. The group of factor variables [xq © X2) are subset from 
{xq © X2 © X5). Then construct the reversible circuit as shown in FigO 



3.3 Experimental Results 

Even though the art of synthesis and optimization of reversible circuits has 
been there for sometimes [TBI dU [271 122], there are none of the work has 
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Figure 5: Reversible circuit realization of a homogeneous Bent function of 
degree 3 on 6 variables shown in Eqn. [H] using the factorization algorithm . 



been done focused on the construction of reversible circuits for homogeneous 
Boolean functions where some of the mentioned work couldn't optimize such 
circuits because of the nonlinearly of that functions. The proposed algorithm 
has been examined on the known benchmarks 2o/5 and 4mod5 that can 
be represented as a set of homogeneous Boolean functions of degree at most 
3, for example, the Boolean expression of the Amodd is as follows, 

/ = 1 © Xo © Xi © X2 © , V 

(BXqXi © X1X2 © XqX-s © X2XS, ^ ' 

where it contains 5 minterms of degree 1 and 4 minterms of degree 2, 
applying the factorization algorithm, the synthesized circuit is shown in Fig. 
[6l where the last three CNOT gates can be removed if the state of the inputs 
is not important. 

The algorithm also has been tested on representatives of homogenous bent 
functions of degree 3 with 6 and 8 variables. It was shown in [6] a set of 30 ho- 
mogeneous bent functions of degree 3 with 6 variables each with 16 minterms 
[BFVQjdVj, and a set of 20 homogeneous bent functions of degree 3 with 8 
variables, 4 functions with 24 minterms {BFVS_d?)JlA), 6 functions with 28 
minterms (i?-Fl/8_(i3_28), 4 functions with 32 minterms (5-Fy8_(i3_32) and 
6 functions with 35 minterms (i?-Fl/8_(i3_35). The experimental results is 
shown in Table [21 The results are shown by omitting the CNOT gates that 
restore the state of the inputs to follow the known benchmarks for 2o/5 and 
4mo(i5[7]. Even if the missing CNOT gates are added to the results, there 
will be no increase in the number of CNOT gates compared with the direct 
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synthesis method. The results show an improvement in the quantum cost 
compared with the best known results in the literature. It can be seen from 
the results of bent functions of 8 variables that the degree of improvement 
increases as the number of minterms increases. 
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Figure 6: Reversible circuit realization of the Amodb function using the fac- 
torization algorithm. 
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Table 2: Reversible circuits bechmarks, where — indicates that results are 
not available. 



4 Conclusion 

This paper shown a simple algorithm based on factorization of the algebraic 
expression of a homogeneous Boolean function of degree at most 3. The 
algorithm finds the common parts of the circuit and decrease the number 
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of their computation, this will decrease the quantum cost of the generated 
circuit. 

The algorithm can also perform on a Boolean function that can be divided 
into a group of homogeneous Boolean functions. The ability of the algorithm 
to minimize the quantum cost increases as the number of minterms of the 
same degree increases. 
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